Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33332d3333203d3e20323637333639.roa
File:                     323830343a346336383a3a2f33332d3333203d3e20323637333639.roa (raw, json)
Hash identifier:          QSFNLd++N8TWMW3KPrnfP1USZBmC1zto3v1oFJJrKl0=
Subject key identifier:   04:9B:21:19:32:0C:37:F8:21:72:99:95:C5:5E:B9:F0:7E:64:9A:66
Certificate issuer:       /CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
Certificate serial:       1621735C639D96371F3185620E5D0E5EDD106330
Authority key identifier: CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33332d3333203d3e20323637333639.roa
Signing time:             Thu 04 Apr 2024 15:26:07 +0000
ROA not before:           Thu 04 Apr 2024 15:21:07 +0000
ROA not after:            Thu 03 Apr 2025 15:26:07 +0000
asID:                     267369
IP address blocks:        2804:4c68::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:21:73:5c:63:9d:96:37:1f:31:85:62:0e:5d:0e:5e:dd:10:63:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
        Validity
            Not Before: Apr  4 15:21:07 2024 GMT
            Not After : Apr  3 15:26:07 2025 GMT
        Subject: CN=049B2119320C37F821729995C55EB9F07E649A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:0c:6f:3a:df:c7:25:b8:e9:a1:43:18:20:
                    f8:04:e1:56:aa:1d:42:a0:a7:1d:aa:df:39:25:ac:
                    fa:e1:73:4f:9f:39:7d:fb:c9:cf:39:39:59:c2:f8:
                    b0:9d:43:42:2f:09:d2:ed:84:74:a2:ef:f0:c2:4d:
                    1c:ed:48:c5:33:1d:76:05:7e:e7:4c:2c:9a:ce:97:
                    ea:24:c1:8f:4a:85:af:87:61:76:86:c9:18:c4:b7:
                    73:d4:16:81:bf:30:a2:8b:cf:97:f5:a9:6f:9d:41:
                    01:df:92:1c:04:2c:ec:0f:9e:cf:38:2c:4e:8b:a9:
                    dc:dd:31:cc:da:8b:81:9d:f0:1a:5e:67:66:ff:4e:
                    5e:39:4a:48:fb:9c:8f:6a:33:16:8a:9e:2a:32:11:
                    d5:bc:fc:73:73:97:4a:cf:36:e8:ee:1f:2b:41:64:
                    aa:e4:7c:fa:44:ca:55:24:ca:44:3e:52:92:75:c5:
                    a4:36:75:dc:39:56:ee:c1:96:de:d5:b1:77:3c:34:
                    22:e6:95:55:2f:fa:be:87:68:20:3f:95:1c:46:1a:
                    17:dd:44:d0:de:9a:37:0c:d8:ca:72:39:a5:62:29:
                    c9:d6:4f:18:cc:d9:46:e5:a3:9c:e6:19:54:82:02:
                    4f:0c:c1:83:4e:5d:90:a5:4a:9c:ba:a7:3b:cd:27:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:21:19:32:0C:37:F8:21:72:99:95:C5:5E:B9:F0:7E:64:9A:66
            X509v3 Authority Key Identifier:
                keyid:CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/323830343a346336383a3a2f33332d3333203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c68::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:04:b3:fe:20:79:a2:d5:9d:66:e3:35:2c:22:32:38:66:23:
         9e:b9:c1:36:41:20:a8:65:d9:f1:d6:2b:9c:7d:b1:1c:aa:d4:
         dc:a8:a6:ac:ce:22:4f:a1:8d:ab:6a:f6:5d:25:ad:3f:c6:7e:
         ce:5e:69:67:b6:d5:a2:2e:2b:3d:da:45:b4:e1:91:72:ff:4f:
         e2:67:6a:24:83:c8:33:bd:58:37:77:fa:f4:6c:e7:cc:e6:06:
         e4:1f:e7:77:92:e6:d7:f6:88:b5:14:22:f8:73:a9:b9:f6:65:
         1a:4c:2d:71:be:fc:c7:f5:85:1d:65:ce:26:68:3d:56:d1:03:
         b8:4c:d1:a2:69:63:64:d2:50:c6:81:da:96:bb:2e:c3:d5:2b:
         87:e0:ea:8b:55:48:e9:18:ec:73:03:63:31:2f:63:3c:a1:dd:
         d8:45:6e:62:8c:b6:79:7d:6b:ba:25:9f:69:86:54:28:8e:e7:
         64:c3:b7:ff:fd:f8:5a:9e:81:d2:d5:ae:12:9a:09:8a:1e:4e:
         42:eb:27:18:a7:8a:92:40:8c:2a:18:af:29:e9:0c:76:f2:2e:
         c7:9b:be:43:f1:75:34:36:21:30:64:43:14:9a:5f:58:13:e6:
         a5:07:45:ac:bf:3a:67:58:47:a5:e9:7c:ba:f9:a4:50:7e:92:
         90:08:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:58:43 2024 by rpki-client on console-ams.rpki-client.org